Input validation vulnerability in POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress 2.5.6

The POST SMTP Mailer plugin for WordPress is a type of software that helps websites send emails. Unfortunately, versions of this plugin up to and including 2.5.6 have a security flaw that can be taken advantage of. This flaw is called Cross-Site Request Forgery. It allows attackers to send emails to any address they choose, as long as they can trick a user with a certain type of access into clicking a link. This means they could potentially use it to reset a website administrator’s password and take control of the website.